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A pplied cr y ptography: Attacking and repairing the winZip encr y ption scheme 

TadayoshI Kohno 

October 2004 Proceedings of the 11th ACM conference on Computer and 
communications security CCS '04 

Publisher: ACM Press 

r- ... . -. u. 01 ^ti^f^ r^4 Additional Information: ful l citation , abstract , references , index terms . 

Full text available: TOp df(171.91 KB) — ; 

^ review 

WinZip is a popular compression utility for Microsoft Windows computers, the latest 
version of which is advertised as having "easy-to-use AES encryption to protect your 
sensitive data." We exhibit several attacks against WinZip's new encryption method, 
dubbed "AE-2" or "Advanced Encryption, version two." We then discuss secure 
alternatives. Since at a high level the underlying WinZip encryption method appears 
secure (the core is exactly Encrypt-then-Authenticate using AES-CTR and HMAC-SHAl), 

Keywords: WinZip, Zip, applied cryptography, attacks, compression, encryption, security 
fixes 



Storing text retrieval systems on CD-ROM: compression and encryption 
considerations 

Shmuel T. Klein, Abraham Bookstein, Scott Deerwester 

July 1989 ACM Transactions on Information Systems (TOIS), volume 7 issue 3 
Publisher: ACM Press 

Additional Information: f ull citation , abstract , references , citing s, index 
terms , review 



Full text available: ^.edfa.53JVlB). 



The emergence of the CD-ROM as a storage medium for full-text databases raises the 
question of the maximum size database that can be contained by this medium. As an 
example, the problem of storing the Tresor de la Langue Fran&ccidel;aise on a CD-ROM is 
examined in this paper. The text alone of this database is 700 megabytes long, more than 
a CD-ROM can hold. In addition, the dictionary and concordance needed to access these 
data must be stored. A further constraint is that some of th ... 

3 A fast MPEG video encn/ption al g orithm 
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http://portaLacm.org/results.cfm?coll=ACM&dl=ACM&CFID=28994607&CFTOKEN=7... 7/19/2007 



Resuljts (page 1): +compression ^encryption +("generating encryption key from compress... Page 2 of 7 



September 1998 Proceedings of the sixth ACM international conference on Multimedia 
MULTIMEDIA '98 

Publisher: ACM Press 

Full text available: ^ pdf(805.58 KB) Additional Information: full citation, references , citing s, index terms 



Keywords: DES, MPEG codec, MPEG video encryption, nnultlmedia data security 



4 Methods for encrypting and decrypting MPEG video data efficiently 
Lei Tang 

February 1997 Proceedings of the fourth ACM international conference on Multimedia 
MULTIMEDIA '96 

Publisher: ACM Press 

Full text available: 'g| pdf(1 .45 MB ) Additional Information: full citation , references , citin gs, index terms 




Keywords: MPEG codec, compression, multimedia commerce, multimedia encryption, 
multimedia security 



5 Content analysis: A novel encr y ption al g orithm for hi g h resolution video 
^ Fuwen Liu, Hartmut Koenig 

June 2005 Proceedings of the international workshop on Network and operating 
systems support for digital audio and video NOSSDAV '05 

Publisher: ACM Press 

Full text available: ^ pdf(335.72 KB) Additional Information: full citation , abstract , references , index terms 

The popularity of multimedia applications is rapidly growing nowadays. The confidentiality 
of video communication is of primary concern for their commercial use, e.g. in video on 
demand services or in multiparty video conferences. Specific video encryption algorithms 
are strongly required in real-time multimedia communication to fulfill the strict timing 
requi-rements. In this paper we present a novel video encryption algorithm, called Puzzle, 
to encrypt video data in software. It is fast ... 

Keywords: data security, multimedia com-munlcation, real-time video encryption, video 
compression 




6 Securitv: Are parameterised biorthogonal wavelet filters suited (better) for selective 
encryption? 

Andreas Uhl, Andreas Pommer 

September 2004 Proceedings of the 2004 workshop on Multimedia and security 
Mlw|&Sec '04 

Publisher: ACM Press 

Full text available: pdf(602.32 KBl Additional Information: full citation , abstract, references , mtings. indgx 
^^^^ ~~ terms 

Selective encryption is used to encrypt parts of a bitstream, in our case images which are 
compressed by a wavelet based method. One approach is to keep the filter secret which is 
used for the transformation. Parameterised wavelet filters can be used to generate a large 
keyspace, however, in the case of orthogonal filters obtained by a variant of Pollen's 
factorisation it turns out that different parameters yield filters with very different quality 
and in particular worse quality as compared to ... 

Keywords: biorthogonal wavelet filters, filter parameterisation, image compression, 
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^ Hardware En g ines for Bus Encryption: A Survey of Existing Techniques | 
R. Elbaz, L. Torres, G. Sassatelii, P. Guillemin, C. Anguiiie, i^. Bardouiiiet, C. Buatols, J. B. 
Rigaud 

IVIarcli 2005 Proceedings of the conference on Design, Automation and Test in Europe 

- Volume 3 DATE *05 
Publisher: IEEE Computer Society 

Fuii text avaiiable: ^ Ddf(1 94.68 KB) Additional Information: full citation , abstract , index terms 

The widening spectrum of applications and services provided by portable and embedded 
devices bring a new dimension of concerns in security. Most of those embedded systems 
(pay-TV, PDAs, mobile phones, etc..) make use of external memory. As a result, the 
main problem is that data and instructions are constantly exchanged between memory 
(RAM) and CPU in clear form on the bus. This memory may contain confidential data like 
commercial software or private contents, which either the end-user or the c ... 

8 Coding and Encr y ption: On error preservin g encryption al g orithms for wireless video | 
^ transmission 

^ Ali Saman Saman Tosun, Wu-chi Feng 

October 2001 Proceedings of the ninth ACM international conference on Multimedia 
MULTIMEDIA '01 

Publisher: ACM Press 

Full text available: ^ pdf(1 57.93 KB) Additional Information: full citation , abstract , references , index terms 

In this paper, we describe error preserving encryption mechanisms for transmission of 
vido over wireless networks. One of the main problems with the secure transmission of 
data over wireless networks is that the bit errors that occur need to typically be sesolved 
before decryption can begin. For vido straming applications, this is unacceptable due to 
the general requirement that video be presented to the user In a continuous manner with 
low latency. In this paper, we describe a systematic ... 

Keywords: video encryption, wireless video transmission 

9 O ptimizing the energy consumed by secure wireless sessions: wireless trans port | 

la ver security case study 
Ramesh Karri, Piyush Mishra 

April 2003 Mobile Networks and Applications, volume 8 issue 2 
Publisher: Kluwer Academic Publishers 

Full text available: 151 pdf(15L69KB) Additional Information: full citation, abstract, references , citings, index 

In this paper we identified the various sources of energy consumption during the setup, 
operation and tear down of a secure wireless session by considering the wireless transport 
layer security protocol. Our analysis showed that data transfers during a secure wireless 
transaction, number and size of messages exchanged during secure session establishment 
and cryptographic computations used for data authentication and privacy during secure 
data transactions in that order are the main sources of en ... 

Keywords: WTLS, energy-efficient, mobile, secure session, security, wireless 



10 Efficient frequency domain video scrambling for content access control 
Wenjun Zeng, Shawmin Lei 
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October 1999 Proceedings of the seventh ACM international conference on Multimedia 

(Part 1) MULTIMEDIA '99 
Publisher: ACM Press 

Full text available: ^ pdfn.65 MB) Additional Information: full citation , abstract , references , index terms 

Multimedia data security is very important for multimedia commerce on the Internet such 
as video-on-demand and real-time video multicast. Traditional cryptographic algorithms 
for data security are often not fast enough to process the vast amount of data generated 
by the multimedia applications to meet the real-time constraints. This paper presents a 
joint encryption and compression framework in which video data are scrambled efficiently 
in the frequency domain by employing selective bit scr ... 

Keywords: compression, content access control, multimedia commerce, multimedia 
encryption, multimedia security, selective encryption, video scrambling 



Low pov^er scalable encr y ption for wireless systems 
James Goodman, Anantha P. Chandrakasan 
January 1998 Wireless Networks, volume 4 issue i 
Publisher: Kluwer Academic Publishers 

Full text available* 151 Ddf(7 39 MB) Additional Information: full citation , abstract , references , citin gs, index 

• terms 

Secure transmission of multimedia information (e.g., voice, video, data, etc.) is critical in 
many wireless network applications. Wireless transmission imposes constraints not found 
in typical wired systems such as low power consumption, tolerance to high bit error rates, 
and scalability. A variety of low power techniques have been developed to reduce the 
power of several encryption algorithms. One key idea involves exploiting the variation in 
computation requirements to dynamically vary th ... 

12 Encryption: Parameterized biorthogonal wavelet lifting for lightweight JPEG 2000 
^ transparent encryption 
^ Dominik Engel, Andreas Uhl 

August 2005 Proceedings of the 7tli workshop on Multimedia and security Ml^&Sec 
•05 

Publisher: ACM Press 

Full text available: Q pdf(1.24 MB) Additional information: full citation , abstract , references , index terms 

Lightweight encryption offers a cogent alternative to full encryption of visual content in 
application settings with clients of low processing power, e.g. mobile applications, as it 
counterbalances security demands and computational demands. We present a lightweight 
transparent encryption scheme for JPEG 2000 that is based on and integrated into the 
wavelet lifting scheme. Keys are constructed from parameterized biorthogonal filters. The 
proposed method comes at extremely low computational cost ... 

Keywords: JPEG 2000, lightweight encryption, parameterized biorthogonal wavelet 
lifting, transparent encryption 



13 Data protection: Searchable symmetric encryption: innproved definitions and efficient Q 
constructions 

Reza Curtmoia, Juan Garay, Seny Kamara, Rafail Ostrovsky 
October 2006 Proceedings of the 13th ACM conference on Computer and 

communications security CCS '06 
Publisher: ACM Press 

Full text available: ^ pdf(682.4Q KB) Additional Information: full citation , abstract , references , index terms 
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Searchable symmetric encryption (SSE) allows a party to outsource the storage of its data 
to another party (a server) in a private manner, while maintaining the ability to 
selectively search over it. This problem has been the focus of active research in recent 
years. In this paper we show two solutions to SSE that simultaneously enjoy the following 
properties: 

1. Both solutions are more efficient than all previous constant-round schemes. In 
particular, the work performed by the server per r ... 

Keywords: multi-user, searchable encryption, searchable symmetric encryption, 
security definitions 



A secure multicast protocol with co pyright protection 
Hao-hua Chu, Lintian Qiao, Klara Nahrstedt, Hua Wang, Ritesh Jain 
April 2002 ACM SIGCOMM Computer Communication Review, volume 32 issue 2 

Publisher: ACM Press 

r- .. * ^ ■■ ui 0 ^*/on^ n-7 un\ Additional Information: full citation , abstract , references , citing s, index 

Full text available: TO pdf(301.97 KB) ^ ^ 

" terms 

We present a simple, efficient, and secure multicast protocol with copyright protection in 
an open and insecure network environment. There is a wide variety of multimedia 
applications that can benefit from using our secure multicast protocol, e.g., the 
commercial pay-per-view video multicast, or highly secure military intelligence video 
conference. Our secure multicast protocol is designed to achieve the following goals. (1) 
It can run In any open network environment. It does not rely on any sec ... 

Keywords: copyright protection, key distribution, multicast security, watermark 



''^ Cryptogra phy and data securit y 
Dorothy Elizabeth Robling Denning 
January 1982 Book 

Publisher: Addison-Wesley Longman Publishing Co., Inc. 

r- MX ^ •. ui 01 ^r/4n fc/iDx Additional Information: full citation , abstract , references , cited by . index 
Full text available: ]gj pdfn9.47 MB) terms 

From the Preface (See Front Matter for full Preface) 

Electronic computers have evolved from exiguous experimental enterprises in the 1940s 
to prolific practical data processing systems in the 1980s. As we have come to rely on 
these systems to process and store data, we have also come to wonder about their ability 
to protect valuable data. 

Data security is the science and study of methods of protecting data in computer and 
communication systems from unauthorized disclosure ... 

16 High dictionary compression for proactive password checking 
^ Francesco Bergadano, Bruno Crispo, Giancarlo Ruffo 

>/ November 1998 ACM Transactions on Information and System Security (TISSEC), 

Volume 1 Issue 1 

Publisher: ACM Press 

ui 01 ^f.^AH on i^Dx Additional Information: full citation, abstract, ref erences , citings, Index 

Full text available: TO pdf( 141.89 KB) ; :* — 

^.t^x terois, review 

The important problem of user password selection is addressed and a new proactive 
password-checking technique is presented. In a training phase, a decision tree is 
generated based on a given dictionary of weak passwords. Then, the decision tree Is used 
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to determine whether a user password should be accepted. Experimental results described 
here show that the method leads to a very high dictionary compression (up to 1000 to 1) 
with low error rates (of the order of 1%). A prototype implementat ... 

Keywords: access control, decision trees, password selection, proactive password 
checking 



Di g ital si g nets: self-enforcing protection of digital information (preliminary version) 
^ Cynthia Dwork, Jeffrey Lotspiech, MonI Naor 

^ July 1996 Proceedings of the twenty-eighth annual ACM symposium on Theory of 
computing STOC '96 

Publisher: ACM Press 

Full text available: ^ pdf(1.24 MB) Additional Information: full citation , references , citin g s, index terms 



18 Research sessions: security and privacy: Order preserving encryption for numeric | 
data 

Rakesh Agrawal, Jerry Kiernan, Ramakrishnan Srikant, Yirong Xu 
June 2004 Proceedings of the 2004 ACM SIGMOD international conference on 
Management of data SIGMOD '04 

Publisher: ACM Press 

Full text available:^ pdf d 88.60 KB) Additional Information: full citation , abstract , references , citings 

Encryption is a well established technology for protecting sensitive data. However, once 
encrypted, data can no longer be easily queried aside from exact nnatches. We present an 
order-preserving encryption scheme for numeric data that allows any comparison 
operation to be directly applied on encrypted data. Query results produced are sound (no 
false hits) and complete (no false drops). Our scheme handles updates gracefully and new 
values can be added without requiring changes in the encryption of ... 

19 Power modeling and optimization for embedded systems: Analyzing the ener gy 
co nsumption of security protocols 

Nachiketh Potlapally, Shvaths Ravi, Anand Raghunathan, Niraj K. Jha 
August 2003 Proceedings of the 2003 international symposium on Low power 

electronics and design ISLPED '03 
Publisher: ACM Press 

Full text available- « pdf(27L69KB) Additional Information: full citation , abstract, references, citings, index 
. i^.*^v terms 

Security Is critical to a wide range of wireless data applications and services. While several 
security mechanisms and protocols have been developed in the context of the wired 
Internet; many new challenges arise due to the unique characteristics of battery powered 
. embedded systems. In this work, we focus on an important constraint of such devices ~ 
battery life - and examine how it is impacted by the use of security protocols.We present 
a comprehensive analysis of the energy requirements of a ... 

Keywords: 3DES, AES, DES, DSA, Diffie-Hellman, ECC, RSA, SSL, cryptographic 
algorithms, embedded system, energy analysis, handheld, low-power, security, security 
protocols 



20 Technical poster session 1: nnultlmedia analysis, processing, and retrieval: 
^ Enhancin g security of frequency domain video encryption 
^ Zheng Liu, Xue Li, Zhaoyang Dong 

October 2004 Proceedings of the 12th annual ACM international conference on 
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Multimedia IwiULTIMEDIA '04 

Publisher: ACM Press 

Full text available: ^ pdf(1.1 3 MB ) Additional Information: full c itation , abstra ct, references . Index terms 

A potential security problem in frequency domain video encryption is that some trivial 
information such as the distribution of DCT coefficients may leal< out secret. To illuminate 
this problem, we performed a successful attack on video using the distribution information 
of DCT coefficients. Then, according to the weak points discovered, a novel video 
encryption algorithm, working on run-length coded data, is proposed. It has amended 
identified security problems, while preserving high efficienc ... 
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